Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/MeeFMR6h8j5NOApXUeH2pn9n07g.roa
File: MeeFMR6h8j5NOApXUeH2pn9n07g.roa (raw, json)
Hash identifier: 1EqjTTuSj4xp6sClac4cmsK1t06t3VYOVB0JX9aOAKk=
Subject key identifier: 31:E7:85:31:1E:A1:F2:3E:4D:38:0A:57:51:E1:F6:A6:7F:67:D3:B8
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 018CC56DF6ADEC8820B7CAFC6EE4EAD2DF5A
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/MeeFMR6h8j5NOApXUeH2pn9n07g.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204851
IP address blocks: 185.237.240.0/22 maxlen: 22
185.237.240.0/24 maxlen: 24
185.237.242.0/24 maxlen: 24
185.237.243.0/24 maxlen: 24
185.237.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f6:ad:ec:88:20:b7:ca:fc:6e:e4:ea:d2:df:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31e785311ea1f23e4d380a5751e1f6a67f67d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:57:d1:69:d6:ec:99:16:5d:cb:25:f4:56:
af:68:7f:30:6b:da:52:a6:21:da:e8:41:53:3d:f4:
0a:de:60:07:7d:1f:63:6f:b2:d8:81:d6:09:71:f4:
84:46:08:bb:4f:dc:39:5b:8a:26:23:ad:9e:35:44:
01:3b:28:24:40:da:75:35:b1:4d:e1:b5:6e:a6:58:
91:a5:99:93:87:1d:4a:c2:6d:fe:b4:ef:49:da:d9:
c4:5d:09:ac:d9:bb:a7:e4:22:d3:d4:62:a1:9f:5e:
9d:d7:c4:b1:4b:53:0d:49:78:e9:fb:e7:a9:48:76:
c6:0b:0c:78:ea:a1:b9:59:54:4b:10:1c:74:ba:af:
00:67:71:de:9e:43:c1:da:fb:a1:47:89:0a:15:5b:
bd:dd:72:58:e1:fe:ec:8d:88:3f:4d:4c:1c:77:5e:
6b:0f:64:ae:e9:f9:0a:4a:e2:d2:f6:00:6d:8e:b8:
a8:0e:ea:ff:0c:f2:16:32:b6:9a:c1:ae:d6:73:e4:
5f:57:73:4d:7f:1c:87:c9:33:99:b0:dc:c0:d0:58:
f5:5f:db:81:9f:0b:6f:63:40:0f:9e:9b:6c:dc:04:
11:3e:6a:aa:18:06:c6:ce:a0:96:c6:d4:b3:3e:bc:
6e:ea:96:1c:17:4b:3b:b4:b6:dc:f7:53:78:25:05:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:85:31:1E:A1:F2:3E:4D:38:0A:57:51:E1:F6:A6:7F:67:D3:B8
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/MeeFMR6h8j5NOApXUeH2pn9n07g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:72:94:e1:57:29:cb:b1:4f:60:64:ac:f0:da:b8:62:b1:9b:
85:e7:4d:af:d9:c5:81:da:92:f5:f2:9b:2e:47:03:80:1c:b8:
1f:fb:6e:c3:65:e4:2f:8c:65:10:0b:40:85:13:7b:6a:a6:64:
f9:da:ea:ad:35:83:b4:a6:b5:b0:d1:f9:e8:5e:ca:50:2a:a1:
a6:b5:8b:25:d5:fa:05:f4:31:4e:f1:64:f3:d9:73:43:04:a8:
52:fe:63:d3:3d:19:a3:c8:a7:78:9e:18:6f:ab:6d:d0:f5:5d:
f9:04:d8:7e:94:c6:2c:b9:06:d2:18:bd:40:59:f2:14:96:89:
ed:76:b0:c5:73:65:dd:bf:03:11:ec:d4:e9:3c:e0:e0:e0:ec:
1c:0c:b0:ed:e8:b9:80:9f:a3:f6:a7:ad:7b:25:e3:76:6a:b9:
38:b1:42:cb:46:e2:99:42:28:c5:f6:7a:29:6e:60:63:a9:19:
7c:89:a9:02:a0:57:59:a9:72:6e:fb:a6:a2:6e:c7:d0:55:ac:
98:35:c0:f3:a7:ac:61:cf:75:ab:f5:79:6b:df:a1:3d:89:f0:
23:bf:3c:5b:60:50:d8:6a:5a:58:e3:df:8f:81:c6:2a:77:16:
ae:6e:76:ab:61:cc:92:0c:6c:05:86:f5:f3:c8:8b:d2:3c:e7:
6a:2a:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:52 2025 by rpki-client